Hi, I'm having a bit of trouble with mapping client certificates to user accounts on my windows server 2008. The client cert is in trusted people and is accepted by IIS if I don't turn onetoone mapping on. But as soon as I try to map, I start getting 401.1 errors. this is my config:
<
iisClientCertificateMappingAuthentication enabled="
true"
defaultLogonDomain="
STHSAPPS"
oneToOneCertificateMappingsEnabled="
true"
><oneToOneMappings>
<
add userName="
user1"
password="password1"
enabled="
true"
certificate="
-----BEGIN CERTIFICATE----- long base 64 -----END CERTIFICATE-----"
/><add userName="
user2"
password="password2"
enabled="
true"
certificate="
-----BEGIN CERTIFICATE-----long base 64 -----END CERTIFICATE-----"
/>
</
oneToOneMappings>
</
iisClientCertificateMappingAuthentication>
The base 64 is taken from the .cer file (exported).
This is what I get in the trace:
72. +AUTH_REQUEST_AUTH_TYPE
| RequestAuthType |
128 |
| RequestAuthType |
CertMap |
Warning
73.
-MODULE_SET_RESPONSE_ERROR_STATUS
| ModuleName |
IISCertificateMappingAuthenticationModule |
| Notification |
2 |
| HttpStatus |
401 |
| HttpReason |
Unauthorized |
| HttpSubStatus |
1 |
| ErrorCode |
2148086018 |
| ConfigExceptionInfo |
|
| Notification |
AUTHENTICATE_REQUEST |
| ErrorCode |
ASN1 unexpected end of data. (0x80093102) |
BTW, what's up with not providing visual aid for this mapping as in IIS &?